General

  • Target

    2444-81-0x0000000002D60000-0x0000000002E91000-memory.dmp

  • Size

    1.2MB

  • MD5

    3c8f4c866f77338c837976354ca9f759

  • SHA1

    73a98f19758ff8881972925f8b4fb99ef30da09b

  • SHA256

    7e885589a282db5245b85f4723d264daaceebfb88e05d8eb26534d36012da0ad

  • SHA512

    8a204b6a40dbd989b1b68a9a26344dd4228b98d42c2ac183642568b387e52a00e91b97ebca36c6f127b01c5bf7a8437f1b91cf6c6b24421e079e6f92f986fca2

  • SSDEEP

    24576:3C7CI9TZDEWk1wCy0zaG9cQAE1ftxmbfYQJZK7aT:7I99DEWVtQAEZmn0e

Score
10/10

Malware Config

Extracted

Family

fabookie

C2

http://app.nnnaajjjgc.com/check/safe

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2444-81-0x0000000002D60000-0x0000000002E91000-memory.dmp
    .dll windows:6 windows x64


    Headers

    Sections